Friday, 27 January 2017

Dirty COW: What it is and How to protect yourself from it

A couple of months ago we have seen that a new vulnerability created a lot of uproar in the network, both because of its dangerousness and the time it has been “hidden” without anyone seeing it.
The vulnerability, called Dirty COW  (Dirty Copy on Write) takes advantage of a flaw in the kernel code to execute code and gain privileges, so while this bug has not been listed as critical (mainly because it is an exploitable vulnerability Locally and not remotely) yes it is important to solve it as soon as possible, because if someone takes remote control of the machine, even at the user level, you can take advantage of the bug to escalate privileges; especially when there are enough public exploits circulating on the Internet such as that found in exploit-db:  https://www.exploit-db.com/exploits/40616/ ; Exploits that are as easy as compiling and executing them.


No comments:

Post a Comment